mirror of
https://github.com/google/santa.git
synced 2026-04-24 03:00:12 -04:00
629e70287c
The new CMake project allows the user to select which SDK version to use. The Xcode path is also configurable to support non-standard installation paths and/or systems with multiple versions installed. Code signing can now be configured via command line, using the CODESIGN_IDENTITY environment variable. New fuzzing targets (libFuzzer) - SantaCache - santactl - santad New make targets: - tests: Runs the tests - fuzz: Runs the fuzzer - redist: Regenerates the redistributable folder - install: Installs Santa
67 lines
2.0 KiB
Bash
Executable File
67 lines
2.0 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
if [[ $EUID -ne 0 ]]; then
|
|
echo "This script must be run as root" 1>&2
|
|
exit 1
|
|
fi
|
|
|
|
if [[ -d "binaries" ]]; then
|
|
SOURCE="."
|
|
elif [[ -d "../binaries" ]]; then
|
|
SOURCE=".."
|
|
else
|
|
echo "Can't find binaries, run install.sh from inside the conf directory" 1>&2
|
|
exit 1
|
|
fi
|
|
|
|
# Determine if anyone is logged into the GUI
|
|
GUI_USER=$(/usr/bin/stat -f '%u' /dev/console)
|
|
|
|
# Unload santad and scheduled sync job.
|
|
/bin/launchctl remove com.google.santad >/dev/null 2>&1
|
|
|
|
# Unload kext.
|
|
/sbin/kextunload -b com.google.santa-driver >/dev/null 2>&1
|
|
|
|
# Unload GUI agent if someone is logged in.
|
|
[[ -n "$GUI_USER" ]] && \
|
|
/bin/launchctl asuser ${GUI_USER} /bin/launchctl remove /Library/LaunchAgents/com.google.santagui.plist
|
|
|
|
# Cleanup cruft from old versions
|
|
/bin/launchctl remove com.google.santasync >/dev/null 2>&1
|
|
/bin/rm /Library/LaunchDaemons/com.google.santasync.plist >/dev/null 2>&1
|
|
/bin/rm /usr/libexec/santad >/dev/null 2>&1
|
|
/bin/rm /usr/sbin/santactl >/dev/null 2>&1
|
|
|
|
# Copy new files.
|
|
/bin/cp -r ${SOURCE}/binaries/santa-driver.kext /Library/Extensions
|
|
/bin/cp -r ${SOURCE}/binaries/Santa.app /Applications
|
|
mkdir -p /usr/local/bin
|
|
/bin/ln -s /Library/Extensions/santa-driver.kext/Contents/MacOS/santactl /usr/local/bin
|
|
|
|
if [ ! -d /var/db/santa ] ; then
|
|
mkdir /var/db/santa
|
|
fi
|
|
|
|
cp ${SOURCE}/conf/com.google.santa.example.mobileconfig /var/db/santa
|
|
|
|
/bin/cp ${SOURCE}/conf/com.google.santad.plist /Library/LaunchDaemons
|
|
/bin/cp ${SOURCE}/conf/com.google.santagui.plist /Library/LaunchAgents
|
|
/bin/cp ${SOURCE}/conf/com.google.santa.asl.conf /etc/asl/
|
|
/bin/cp ${SOURCE}/conf/com.google.santa.newsyslog.conf /etc/newsyslog.d/
|
|
|
|
# Reload syslogd to pick up ASL configuration change.
|
|
/usr/bin/killall -HUP syslogd
|
|
|
|
# Load kext.
|
|
/sbin/kextload /Library/Extensions/santa-driver.kext
|
|
|
|
# Load santad and scheduled sync jobs.
|
|
/bin/launchctl load /Library/LaunchDaemons/com.google.santad.plist
|
|
|
|
# Load GUI agent if someone is logged in.
|
|
[[ -n "$GUI_USER" ]] && \
|
|
/bin/launchctl asuser ${GUI_USER} /bin/launchctl load /Library/LaunchAgents/com.google.santagui.plist
|
|
|
|
exit 0
|